Hello TI-Engineers/Forum,
I am developing a Board for usage in mass transportation systems where certification of the whole system is necessary. For the fulfillment of various (European) Standards, I need to conduct a HAZOP (hazard and operability study) Analysis. My preferred MCU is the TMS570LS3137.
As a result of the HAZOP there are appeared a few questions regarding the internal memory protection of data:
+ How can the TCRAM detect a complete failed write (logical memory cell is not updated entirely, so during the next read access outdated data will be read.)
+ How can the TCRAM detect a complete failed read (RAM cells are disconnected from the Bus.)
+ In the Safety Manual for the TMS570LS20216S, V1.0.4 there is mentioned that **NDA Material - removed from the public post by TI**
What are the defense mechanisms for these threats?
To my own understanding:
+ In the Hercules Safety Manual SPNU511, Fig. 8 there is mentioned that the 2 TCM Busses are EVEN Address and ODD Address separated. Is the transfer to/from memory executed in parallel?
+ Are the two Busses B0TCM and B1TCM connected to each of the cores (Master CPU and Checker CPU) or is each Bus exclusive for one CPU core? Exists there a more detailed figure of this matter?
+ When a write is executed, whose CPU (Master or Checker?) data will be written?
+ TRM Question: In the document (SPNU499) in p.302, Fig. 6-2 there is mentioned that the logical address space starts at 0MB and end at 0MB+256kB. The implemented ECC space starts at 4MB and ends at 4MB+256kB. Why is the ECC space as big as the data space? Shouldn’t the ECC space just be one eight of the data space?
Regards and thank you for the answers in advance
Lorenz